CVE-2023-31279 | THREATINT

Description

The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform when the owner has not disabled the AirVantage Management Service on the devices or registered the device. This could enable an attacker to configure, manage, and execute AT commands on an unsuspecting user’s devices.

Reserved 2023-04-26 | Published 2024-12-20 | Updated 2024-12-24 | Assigner SWI

HIGH: 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Problem types

CWE-287 Improper Authentication

Product status

Default status

unaffected

Devices not registered in AirVantage with the AirVantage Management Service enabled.

affected

References

source.sierrawireless.com/...al-bulletin---swi-psa-2023-002/

cve.org (CVE-2023-31279)

nvd.nist.gov (CVE-2023-31279)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.